Privacy Notice
Sue Jennings Counselling
This privacy statement outlines my obligations as a therapist. It outlines your rights as a client.
Therapist responsibilities
In order to comply with new regulations regarding contact and consent, I need to make you aware of your rights and confirm that you give consent for me to collect and store your data in the way described below.
What is collected and why?
I collect and store your name, date of birth and age. This is basic information which helps me to get to know you better, but is also stored for safeguarding purposes (see confidentiality/ sharing of information statement). Your address, email address and phone number are recorded and stored as a means to contact you regarding sessions. These details may also be used for emergency purposes where there is evident risk to yourself (see confidentiality statement). GP details are recorded for safeguarding purposes; if I have cause for concern for your safety I may need to contact your GP. Where possible I will seek your consent and inform you before doing so. Session notes which are brief and cover key themes discussed in our sessions. The purpose of these is to enable my recollection, to monitor the work we are doing and also need to be retained for lawful and insurance purposes where appropriate.
Confidentiality/ sharing of information
All information shared will not be shared with anyone else. I will not use your information for any purpose other than that related to therapy.
There are however exceptions that may require me to share your information with a third-party, details of which are outlined below. Confidentiality may need to be breached in the following circumstances:
•
There is significant risk of harm to yourself; in this instance information may need to be shared with a GP or other professional
•
There is information shared that suggests a child/vulnerable adult is being harmed or is at risk of harm; in this instance information may need to be shared with the relevant services.
•
If there is disclosure of terrorism or money laundering I am legally obliged to disclose this information to the police.
•
If I am subpoenaed to share any information or required to do so by a court then I must do so upon request.
•
I share my case work as part of ongoing supervision with other counsellors, who adhere to the same confidentiality requirement.
•
In the event of my death or terminal injury resulting in me being unable to carry out my work my supervisor will have access to my clinical records in order to inform clients, end therapy and destroy data as required.
Data storage and disposal
All data is recorded on paper format and stored in a locked filing cabinet. I keep your name and code on a password protected laptop. Your contact number is stored on my phone using your first name only. Once therapy has ended I will keep your address and contact details for a maximum of 30 days, after which they will be securely destroyed. Your session notes and client code will be retained for 6 years in line with insurance and legal requirements.
Your rights
Under the General Data Protection Regulations you have the following rights:
•
The right to be informed about the collection and use of your personal data
•
The right to access copies of any information held about you; this can be accessed through a data subject access request and the right to receive a response within 30 days.
•
The right to rectification; to have inaccurate personal data corrected or completed if incomplete.
•
The right to erasure; you have the right to opt out of data collection. If you do wish to do so please make this request in writing, however some data cannot be erased and will need to be retained for lawful purposes and in accordance with my insurance policy.
•
You have the right to obtain and reuse your personal data across different services.
•
You have the right to object to any personal data being collected. This will need to be made known in advance, or at the start of therapy commencing. Please be aware if this is the case, all therapeutic work will be terminated as I am required to keep appropriate records in line with insurance and ethical bodies, as well as for legal and safeguarding matters.
Accessing your data
If you wish to make a request for your data under a data subject request please do so in writing. I will then request you sign a disclosure consent form. You will expect to receive the information within 30 days of receipt of this request.
